Probleme de webcam logitech pro5000

baoben -  
Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,
Comme j'ai pu le voir sur pas mal de forum j'ai été infecté par le virus msn qui circule "une photo de toi" ou quelque chose du genre.
Depuis ma webcam ne fonctionne plus et dès que j'allume mon pc un message s'affiche
" Le fichier 'lvuvcflt.sys' de logitech USB Video Camera Disk est nécessaire"
Bien entendu il m'est impossible de trouver ce fichier.
J'ai essayé de reparer avec msnfix mais sans succès, pas plus qu'avec avast ou norton ou ad-aware.
Rien ne fonctionne et j'aimerais bien pouvoir retrouver l'usage de ma webcam.
I need help PLEASE...
Merci d'avance
Configuration: Windows XP

31 réponses

  • 1
  • 2
  1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    Hello,

    - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

    - Double-clique sur RSIT.exe afin de lancer le programme.

    - Clique sur Continue à l'écran Disclaimer.

    -Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches) dans deux messages différents.
    0
  2. baoben
     
    voici le rapport log.txt
    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Compaq_Propriétaire at 2009-09-18 12:00:43
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 109 GB (59%) free of 185 GB
    Total RAM: 959 MB (31% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:01:05, on 18/09/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\VM_STI.EXE
    C:\Program Files\QuickTime\QTTask.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\HP\KBD\KBD.EXE
    C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\MICROS~4\rapimgr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Logitech\Logitech Vid\vid.exe
    C:\Program Files\NETGEAR\WG311v3\wlancfg5.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\A60KB463\RSIT[1].exe
    C:\Program Files\trend micro\Compaq_Propriétaire.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lequipe.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: Microsoft MSJava 32 - {43F7497C-7687-4DEA-A057-F21BD81BC896} - C:\WINDOWS\system32\msjava32.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
    O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
    O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: NETGEAR WG311v3 Smart Wizard.lnk = ?
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYFR
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
    O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
    O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
    O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} - http://acces.blonde.com/package/PackageHtmlCab.CAB
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Service Google Update (gupdate1ca37ebf4e8c73e) (gupdate1ca37ebf4e8c73e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    0
  3. baoben
     
    Et voici le rapport info.txt
    info.txt logfile of random's system information tool 1.06 2009-09-18 12:01:10

    ======Uninstall list======

    -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
    -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
    -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
    -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    Ad-Aware-->"C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe" REMOVE=TRUE MODIFY=FALSE
    Ad-Aware-->C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002}
    Amélioration de nos services-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1036
    Apple Mobile Device Support-->MsiExec.exe /I{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
    ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
    avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
    Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{4002F73D-EBB3-4EA1-A2FF-DBCB4529759E}
    Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{51F366F4-C2E4-429A-866A-59C885ED42FD}
    Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
    Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{175B7C4A-CAF8-437A-B597-73E0D2D970FE}
    eMule-->"C:\Program Files\eMule\Uninstall.exe"
    Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
    EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{D518AD32-C710-4616-BA0D-D4B1FA5F82E8}
    Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}
    Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.21\Installer\setup.exe" --uninstall --system-level
    Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
    Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar3.dll"
    Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    GrabIt 1.6.0 Beta (build 928)-->"C:\Program Files\GrabIt\unins000.exe"
    High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
    ImageMixer VCD/DVD2 for OLYMPUS-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F51A0CA-2BDD-474E-BB90-C7FA8EA78F52}\Setup.exe" -l0x40c UNINSTALL
    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
    InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
    iTunes-->MsiExec.exe /I{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}
    J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
    Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Logitech Vid-->MsiExec.exe /I{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}
    Logitech Webcam Software-->MsiExec.exe /I{AC96671C-2001-432C-9826-5266D84EF1DC}
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{3585ED1C-74C5-43B0-A232-831B96A12A2B}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
    Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
    Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
    Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
    MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    My Web Search (Smiley Central)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
    NETGEAR WG311v3 PCI Adapter-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{70014586-7BBA-4A92-A610-CDC896C48F8F}
    OLYMPUS Master-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{BA820A24-704B-428D-9904-71A10DAC1372} /l1036 /zUNINSTALL
    OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{6D7F8D4B-D1A4-402A-973E-31E90940E585}
    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
    PS2-->C:\WINDOWS\system32\ps2.exe uninstall
    Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
    Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
    QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
    RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
    Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
    SLD Codec Pack-->C:\Program Files\SLD Codec Pack\uninstall.exe
    Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
    Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
    Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
    Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
    Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
    Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
    VIMICRO USB PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}\setup.exe" -l0x9
    Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
    Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
    Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
    Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
    Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{DCE65B11-710D-4C54-9DE5-1A6A0BD2186B}
    Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
    Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}
    Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
    Windows Media Player 10 Hotfix - KB894476-->"C:\WINDOWS\$NtUninstallKB894476$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

    ======Security center information======

    AV: avast! antivirus 4.8.1351 [VPS 090917-0]

    ======System event log======

    Computer Name: BEN
    Event Code: 62486
    Message: Invalid parameters

    Record Number: 39167
    Source Name: ati2mtag
    Time Written: 20090626205224.000000+120
    Event Type: Informations
    User:

    Computer Name: BEN
    Event Code: 62486
    Message: Invalid parameters

    Record Number: 39166
    Source Name: ati2mtag
    Time Written: 20090626205224.000000+120
    Event Type: Informations
    User:

    Computer Name: BEN
    Event Code: 62486
    Message: Invalid parameters

    Record Number: 39165
    Source Name: ati2mtag
    Time Written: 20090626205224.000000+120
    Event Type: Informations
    User:

    Computer Name: BEN
    Event Code: 62486
    Message: Invalid parameters

    Record Number: 39164
    Source Name: ati2mtag
    Time Written: 20090626205224.000000+120
    Event Type: Informations
    User:

    Computer Name: BEN
    Event Code: 62486
    Message: Invalid parameters

    Record Number: 39163
    Source Name: ati2mtag
    Time Written: 20090626205224.000000+120
    Event Type: Informations
    User:

    =====Application event log=====

    Computer Name: BEN
    Event Code: 0
    Message:
    Record Number: 23455
    Source Name: SPBBCSvc
    Time Written: 20090118100257.000000+060
    Event Type: Informations
    User:

    Computer Name: BEN
    Event Code: 26
    Message:
    Record Number: 23454
    Source Name: SNDSrvc
    Time Written: 20090118100257.000000+060
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: BEN
    Event Code: 26
    Message:
    Record Number: 23453
    Source Name: ISService
    Time Written: 20090118100257.000000+060
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: BEN
    Event Code: 26
    Message:
    Record Number: 23452
    Source Name: ccSetMgr
    Time Written: 20090118100256.000000+060
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: BEN
    Event Code: 26
    Message:
    Record Number: 23451
    Source Name: ccProxy
    Time Written: 20090118100256.000000+060
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
    "PROCESSOR_REVISION"=0409
    "NUMBER_OF_PROCESSORS"=2
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
    "CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip
    "QTJAVA"=C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip

    -----------------EOF-----------------
    0
  4. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    j'aimerais bien pouvoir retrouver l'usage de ma webcam.

    A mon avis, ce n'est pas le seul problème :(
    Tes rapports révèlent de multiples infections.
    J'espère pour toi que tu suivras mes conseils jusqu'au bout.

    Si tu as l'intention en cours de désinfection d'arrêter la procédure, je te prierais de bien vouloir m'en avertir.

    Chaque étape numérotée est à faire séparément (toujours l'une après l'autre, et dans l'ordre):


    1/
    Télécharge Toolbar-S&D (Merci eric 71) sur ton Bureau:
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3

    Lance l'installation du programme en double cliquant sur le fichier téléchargé.
    Double-clique sur le raccourci de Toolbar-S&D.
    Choisi la langue souhaitée en tapant la lettre "F" puis en validant avec la touche Entrée.
    Choisi maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    Poste un copier/coller du rapport généré.

    2/

    • Télécharge Ad-remover sur ton bureau :
    http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

    ! Déconnecte toi et ferme toutes applications en cours !

    • Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

    • Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
    • Au menu principal choisis l'option "S" et tape sur [entrée] .

    • Laisse travailler l'outil et ne touche à rien ...

    --> Poste le rapport qui apparait à la fin , sur le forum ...

    ( Le rapport est sauvegardé sous C:\Ad-report-scan.log )

    Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    3/
    *Télécharge et installe UsbFix de C_XX & Chiquitine29.

    *Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir.

    *Double clique sur le raccourci UsbFix présent sur ton bureau.

    *Choisi l'option 1 ( Recherche )

    *Laisse travailler l'outil.

    *Ensuite poste le rapport UsbFix.txt qui apparaîtra dans ton prochain message.

    Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    @+ J'attends tes trois rapports: Merci de les poster dans des messages différents.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. baoben
     
    Je vais suivre a la lettre la procedure et jusqu'au bout!
    cela fait trop longtemps que je galere...
    Voici le premier rapport
    -----------\\ ToolBar S&D 1.2.9 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.06GHz )
    BIOS : Default System BIOS
    USER : Compaq_Propriétaire ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1351 [VPS 090917-0] 4.8.1351 (Activated)
    C:\ (Local Disk) - NTFS - Total:180 Go (Free:106 Go)
    D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
    Option : [1] ( 18/09/2009|14:22 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\FunWebProducts
    C:\Program Files\FunWebProducts\ScreenSaver
    C:\Program Files\FunWebProducts\Shared
    C:\Program Files\FunWebProducts\ScreenSaver\Images
    C:\Program Files\FunWebProducts\ScreenSaver\Images\010D3200.urr
    C:\Program Files\FunWebProducts\Shared\Cache
    C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn-new.html
    C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn-new.html
    C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
    C:\Program Files\MyWebSearch
    C:\Program Files\MyWebSearch\bar
    C:\Program Files\MyWebSearch\SrchAstt
    C:\Program Files\MyWebSearch\bar\1.bin
    C:\Program Files\MyWebSearch\bar\Avatar
    C:\Program Files\MyWebSearch\bar\Cache
    C:\Program Files\MyWebSearch\bar\Game
    C:\Program Files\MyWebSearch\bar\History
    C:\Program Files\MyWebSearch\bar\icons
    C:\Program Files\MyWebSearch\bar\Message
    C:\Program Files\MyWebSearch\bar\Notifier
    C:\Program Files\MyWebSearch\bar\Settings
    C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
    C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
    C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
    C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
    C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
    C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
    C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
    C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
    C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
    C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Cache\0006614D
    C:\Program Files\MyWebSearch\bar\Cache\0007CE4A.bin
    C:\Program Files\MyWebSearch\bar\Cache\0007D09C.bin
    C:\Program Files\MyWebSearch\bar\Cache\0007D222.bin
    C:\Program Files\MyWebSearch\bar\Cache\0007D3F7.bin
    C:\Program Files\MyWebSearch\bar\Cache\0007D5FB.bin
    C:\Program Files\MyWebSearch\bar\Cache\0007D7C0
    C:\Program Files\MyWebSearch\bar\Cache\000B8298.bin
    C:\Program Files\MyWebSearch\bar\Cache\000B90A1.bin
    C:\Program Files\MyWebSearch\bar\Cache\000B9E4D.bin
    C:\Program Files\MyWebSearch\bar\Cache\000BA09F.bin
    C:\Program Files\MyWebSearch\bar\Cache\035442D5.bin
    C:\Program Files\MyWebSearch\bar\Cache\035444E8.bin
    C:\Program Files\MyWebSearch\bar\Cache\03544640.bin
    C:\Program Files\MyWebSearch\bar\Cache\03544788
    C:\Program Files\MyWebSearch\bar\Cache\files.ini
    C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
    C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
    C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
    C:\Program Files\MyWebSearch\bar\History\search2
    C:\Program Files\MyWebSearch\bar\icons\CM.ICO
    C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
    C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
    C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
    C:\Program Files\MyWebSearch\bar\icons\WB.ICO
    C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
    C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
    C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
    C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
    C:\Program Files\MyWebSearch\SrchAstt\1.bin
    C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@mywebsearch[2].txt
    C:\WINDOWS\System32\f3PSSavr.scr
    C:\Program Files\Internet Explorer\msimg32.dll
    C:\Program Files\MSN Messenger\riched20.dll

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
    "Start Page"="https://www.lequipe.fr/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="https://fr.yahoo.com/"
    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Start Page"="https://fr.yahoo.com/"

    --------------------\\ Recherche d'autres infections

    C:\Program Files\Instant Access
    C:\Program Files\Instant Access\Center
    C:\Program Files\Instant Access\DesktopIcons
    C:\Program Files\Instant Access\Multi
    [b]==> EGDACCESS <==/b

    --------------------\\ ROGUES ..

    C:\DOCUME~1\COMPAQ~1\APPLIC~1\DriveCleaner Free

    1 - "C:\ToolBar SD\TB_1.txt" - 18/09/2009|14:23 - Option : [1]

    -----------\\ Fin du rapport a 14:23:56,86
    0
  7. baoben
     
    Voici le deuxieme rapport avec m'etre deconnecte et avoir ferme toutes les applis
    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_V | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 15/09/2009 à 10:00 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 14:42:58, 18/09/2009 | Mode Normal | Option: SCAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: BEN | Utilisateur actuel: Compaq_Propri‚taire
    .
    ============== ÉLÉMENT(S) TROUVÉ(S) ==============
    .
    .
    HKCU\Software\Fun Web Products
    HKCU\Software\FunWebProducts
    HKCU\Software\Grand Virtual
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKCU\Software\MyWebSearch
    HKCU\Software\Titan Poker
    HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
    HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
    HKLM\Software\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
    HKLM\Software\Classes\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
    HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}
    HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
    HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
    HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
    HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
    HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
    HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
    HKLM\Software\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
    HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443E-9776-36915D323AD3}
    HKLM\Software\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}
    HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
    HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
    HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
    HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
    HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
    HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\FunWebProducts.BrowserOverlayBarButton
    HKLM\Software\Classes\FunWebProducts.BrowserOverlayBarButton.1
    HKLM\Software\Classes\FunWebProducts.BrowserOverlayEmbed
    HKLM\Software\Classes\FunWebProducts.BrowserOverlayEmbed.1
    HKLM\Software\Classes\FunWebProducts.DataControl
    HKLM\Software\Classes\FunWebProducts.DataControl.1
    HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler
    HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
    HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar
    HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
    HKLM\Software\Classes\FunWebProducts.HTMLMenu
    HKLM\Software\Classes\FunWebProducts.HTMLMenu.1
    HKLM\Software\Classes\FunWebProducts.HTMLMenu.2
    HKLM\Software\Classes\FunWebProducts.IECookiesManager
    HKLM\Software\Classes\FunWebProducts.IECookiesManager.1
    HKLM\Software\Classes\FunWebProducts.KillerObjManager
    HKLM\Software\Classes\FunWebProducts.KillerObjManager.1
    HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton
    HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton.1
    HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl
    HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1
    HKLM\Software\Classes\FunWebProducts.ShellViewControl
    HKLM\Software\Classes\FunWebProducts.ShellViewControl.1
    HKLM\Software\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
    HKLM\Software\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
    HKLM\Software\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
    HKLM\Software\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
    HKLM\Software\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
    HKLM\Software\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKLM\Software\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
    HKLM\Software\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
    HKLM\Software\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
    HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
    HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
    HKLM\Software\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
    HKLM\Software\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
    HKLM\Software\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
    HKLM\Software\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
    HKLM\Software\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
    HKLM\Software\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
    HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
    HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
    HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
    HKLM\Software\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
    HKLM\Software\Classes\screensavercontrol.screensaverinstaller
    HKLM\Software\Classes\screensavercontrol.screensaverinstaller.1
    HKLM\Software\Classes\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
    HKLM\Software\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
    HKLM\Software\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
    HKLM\Software\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
    HKLM\Software\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
    HKLM\Software\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
    HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
    HKLM\Software\FocusInteractive
    HKLM\Software\Fun Web Products
    HKLM\Software\FunWebProducts
    HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}
    HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
    HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
    HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
    HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
    HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EFF3CF7-99C1-4C29-BC2B-68E057E22340}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
    HKLM\Software\MyWebSearch
    HKLM\Software\Titan Poker
    HKU\S-1-5-21-566686811-4249129168-2806459617-1008\Software\Microsoft\Internet Explorer\Searchscopes\{56256A51-B582-467E-B8D4-7786EDA79AE0}
    HKU\S-1-5-21-566686811-4249129168-2806459617-1008\Software\Titan Poker
    HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources\\F3PopularScreenSavers
    HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{08165EA0-E946-11CF-9C87-00AA005127ED}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00A6FAF6-072E-44CF-8957-5838F569A31D}
    HKCU\software\microsoft\internet explorer\searchscopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    .
    C:\Documents and Settings\All Users\Bureau\Titan Poker.lnk
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
    C:\Poker\Titan Poker
    C:\Program Files\FunWebProducts
    C:\Program Files\Internet Explorer\msimg32.dll
    C:\Program Files\MSN Messenger\Msimg32.dll
    C:\Program Files\MSN Messenger\Riched20.dll
    C:\Program Files\MyWebSearch
    C:\WINDOWS\Downloaded Program Files\F3initialsetup1.0.0.15-3.inf
    C:\WINDOWS\Prefetch\MWSOEMON.EXE-194861D2.pf
    C:\WINDOWS\System32\f3PSSavr.scr
    .
    ============== Scan additionnel ==============
    .
    .
    * Mozilla FireFox Version [Impossible d'obtenir la version] *
    .
    Nom du profil: (Compaq_Propri‚taire)
    .
    .
    .
    * Internet Explorer Version 7.0.5730.11 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Search Page: hxxp://www.google.com
    Secondary Start Pages: hxxp://google.fr/\0\0
    Start Page: hxxp://lequipe.fr/
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://fr.yahoo.com
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://fr.yahoo.com
    Secondary Start Pages: hxxp://fr.search.yahoo.com/\0\0
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ===================================
    .
    12436 Octet(s) - C:\Ad-Report-SCAN.log
    .
    1852 Fichier(s) - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
    68 Fichier(s) - C:\WINDOWS\Temp
    .
    2 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
    0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
    .
    Fin à: 14:49:24 | 18/09/2009
    .
    ============== E.O.F ==============
    .
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Toujours étape après étape et dans l'ordre:

      1/
      Relance Toolbar-S&D. Choisis cette fois l'option 2 "suppression" puis valide avec "Entrée".
      Ne ferme pas la fenêtre lors de la suppression
      Poste ensuite le rapport.



      Au cas où :
      Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
      Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
      Tape explorer.exe puis valide.


      2/
      • Relance Ad-remover,
      • Au menu principal choisis l'option "L" et tape sur [entrée] .

      • Laisse travailler l'outil et ne touche à rien ...

      --> Poste le rapport qui apparait à la fin , sur le forum ...

      ( Le rapport est sauvegardé sous C:\Ad-report-clean.log )


      3/ J'attends toujours ton rapport d'UsbFix.
      0
  8. baoben
     
    Rapport usb-fix avec toutes mes excuses pour l'attente...

    ############################## | UsbFix V6.034 |

    User : Compaq_Propriétaire (Administrateurs) # BEN
    Update on 17/09/2009 by Chiquitine29, C_XX & Chimay8
    Start at: 17:08:20 | 18/09/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html

    Intel(R) Pentium(R) 4 CPU 3.06GHz
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 7.0.5730.11
    Windows Firewall Status : Enabled
    AV : avast! antivirus 4.8.1351 [VPS 090917-0] 4.8.1351 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 180,3 Go (106,78 Go free) [PRESARIO] # NTFS
    D:\ -> Disque fixe local # 5,99 Go (2,34 Go free) [PRESARIO_RP] # FAT32
    E:\ -> Disque CD-ROM
    F:\ -> Disque amovible
    G:\ -> Disque amovible
    H:\ -> Disque amovible
    I:\ -> Disque amovible

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\wbem\unsecapp.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\VM_STI.EXE
    C:\Program Files\QuickTime\QTTask.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\HP\KBD\KBD.EXE
    C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\MICROS~4\rapimgr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Logitech\Logitech Vid\vid.exe
    C:\Program Files\NETGEAR\WG311v3\wlancfg5.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ################## | Fichiers # Dossiers infectieux |

    D:\autorun.inf
    D:\desktop.ini

    ################## | Registre # Clés Run infectieuses |

    ################## | Registre # Mountpoints2 |

    HKCU\..\..\Explorer\MountPoints2\{81c0d71e-ec3a-11db-b51c-00146c7238f2}
    Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

    ################## | ! Fin du rapport # UsbFix V6.034 ! |
    0
  9. baoben
     
    Voici le rapport toolbar apres suppression...
    Aucun probleme a signifier mon bureau n'a pas disparu

    -----------\\ ToolBar S&D 1.2.9 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.06GHz )
    BIOS : Default System BIOS
    USER : Compaq_Propriétaire ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1351 [VPS 090917-0] 4.8.1351 (Activated)
    C:\ (Local Disk) - NTFS - Total:180 Go (Free:106 Go)
    D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
    Option : [2] ( 18/09/2009|17:12 )

    -----------\\ SUPPRESSION

    Supprime! - C:\Program Files\FunWebProducts\ScreenSaver
    Supprime! - C:\Program Files\FunWebProducts\Shared
    Echec ! - C:\Program Files\MyWebSearch\bar
    Supprime! - C:\Program Files\MyWebSearch\SrchAstt
    Echec ! - C:\Program Files\MyWebSearch\bar\1.bin
    Echec ! - C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
    Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@mywebsearch[2].txt
    Supprime! - C:\WINDOWS\System32\f3PSSavr.scr
    Supprime! - C:\Program Files\Internet Explorer\msimg32.dll
    Supprime! - C:\Program Files\MSN Messenger\riched20.dll
    Supprime! - C:\Program Files\FunWebProducts
    Echec ! - C:\Program Files\MyWebSearch

    -----------\\ DEUXIEME PASSAGE

    Echec ! - C:\Program Files\MyWebSearch\bar
    Echec ! - C:\Program Files\MyWebSearch\bar\1.bin
    Echec ! - C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
    Echec ! - C:\Program Files\MyWebSearch

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\MyWebSearch
    C:\Program Files\MyWebSearch\bar
    C:\Program Files\MyWebSearch\bar\1.bin
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
    "Start Page"="https://www.lequipe.fr/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="https://fr.yahoo.com/"
    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Start Page"="https://www.msn.com/fr-fr/"

    --------------------\\ Recherche d'autres infections

    C:\Program Files\Instant Access
    C:\Program Files\Instant Access\Center
    C:\Program Files\Instant Access\DesktopIcons
    C:\Program Files\Instant Access\Multi
    [b]==> EGDACCESS <==/b

    --------------------\\ ROGUES ..

    C:\DOCUME~1\COMPAQ~1\APPLIC~1\DriveCleaner Free

    1 - "C:\ToolBar SD\TB_1.txt" - 18/09/2009|14:23 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 18/09/2009|17:13 - Option : [2]

    -----------\\ Fin du rapport a 17:13:09,94
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Je te file un peu de boulot, je m'absente.
      :)


      1/
      J'attends le rapport d'Adremover (Etape 2 de ce message).


      2/
      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir


      * Double clique sur le raccourci UsbFix présent sur ton bureau.

      * choisi l'option 2 ( Suppression )

      * Ton bureau disparaîtra et le pc redémarrera .

      * Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.

      * Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau dans ton prochain message .

      * Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )



      3/
      Après m'avoir posté le rapport d'UsbFix:

      Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le Bureau.

      -Double-clique sur Navilog1.exe pour de lancer l'installation.
      Si l'installation ne se lance pas automatiquement, double-clique sur Navilog présent sur le Bureau.
      Appuie sur f et la touche Entrée pour valider.
      Appuie sur une touche de ton clavier à chaque fois qu'on te le demande, jusqu'au menu des options.

      -Choisis l'option 1 et appuie et la touche Entrée pour valider.
      Attend jusqu'à ce que s'affiche le message : " Analyse terminée le "

      -le Bloc-notes contenant le rapport devrait s'afficher, fais un copier/coller du contenu de ce rapport dans ta prochaine réponse.
      Si le rapport ne s'affiche pas, tu le trouveras ici: C:\fixnavi.txt



      4/
      Après m'avoir posté le rapport de Navilog1:

      Télécharge Malwarebytes' Anti-Malware (MBAM)

      * Double clique sur le fichier téléchargé pour lancer le processus d'installation.
      * Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
      * Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
      * Sélectionne "Exécuter un examen rapide"
      * Clique sur "Rechercher"
      * L'analyse démarre, le scan est relativement long, c'est normal.
      * A la fin de l'analyse, un message s'affiche :

      "L'examen s'est terminé normalement. "

      Clique sur "Afficher les résultats" pour afficher tous les objets trouvés.

      Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.

      * Ferme tes navigateurs. (Internet Explorer/ Firefox...)
      * Si des malwares ont été détectés, clique sur Afficher les résultats.
      Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
      * MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.


      5/
      Après m'avoir posté ton rapport d'MBAM, peux tu me poster un nouveau rapport Log.txt d'Rsit, pour voir où on en est.



      C'est simple: 5 étapes -->5 rapports--> à poster dans 5 messages différents.
      @+
      0
  10. baoben
     
    rapport usb-fix

    ############################## | UsbFix V6.034 |

    User : Compaq_Propriétaire (Administrateurs) # BEN
    Update on 17/09/2009 by Chiquitine29, C_XX & Chimay8
    Start at: 18:06:25 | 18/09/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html

    Intel(R) Pentium(R) 4 CPU 3.06GHz
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 7.0.5730.11
    Windows Firewall Status : Enabled
    AV : avast! antivirus 4.8.1351 [VPS 090917-0] 4.8.1351 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 180,3 Go (106,8 Go free) [PRESARIO] # NTFS
    D:\ -> Disque fixe local # 5,99 Go (2,34 Go free) [PRESARIO_RP] # FAT32
    E:\ -> Disque CD-ROM
    F:\ -> Disque amovible
    G:\ -> Disque amovible
    H:\ -> Disque amovible
    I:\ -> Disque amovible

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wbem\unsecapp.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\rundll32.exe

    ################## | Fichiers # Dossiers infectieux |

    Supprimé ! D:\autorun.inf
    Supprimé ! D:\desktop.ini

    ################## | Registre # Clés Run infectieuses |

    ################## | Registre # Mountpoints2 |

    Supprimé ! HKCU\...\Explorer\MountPoints2\{81c0d71e-ec3a-11db-b51c-00146c7238f2}\Shell\AutoRun\Command

    ################## | Listing des fichiers présent |

    [18/09/2009 18:05|--a------|1437] C:\aaw7boot.log
    [18/09/2009 18:02|--a------|64550] C:\Ad-Report-CLEAN.log
    [18/09/2009 14:49|--a------|12755] C:\Ad-Report-SCAN.log
    [23/11/2004 23:21|--a------|0] C:\AUTOEXEC.BAT
    [04/03/2006 14:01|-rahs----|218] C:\BOOT.BAK
    [04/03/2006 14:46|-rahs----|298] C:\boot.ini
    [05/08/2004 14:00|-rahs----|4952] C:\Bootfont.bin
    [05/08/2004 14:00|-r-hs----|263488] C:\cmldr
    [23/11/2004 23:21|--a------|0] C:\CONFIG.SYS
    [?|?|?] C:\hiberfil.sys
    [23/11/2004 23:21|-rahs----|0] C:\IO.SYS
    [05/03/2006 01:12|--ah-----|319] C:\IPH.PH
    [23/11/2004 23:21|-rahs----|0] C:\MSDOS.SYS
    [05/08/2004 14:00|-rahs----|47564] C:\NTDETECT.COM
    [27/08/2008 17:16|-rahs----|252240] C:\ntldr
    [?|?|?] C:\pagefile.sys
    [09/07/2008 12:29|--a------|159] C:\Setup.log
    [14/12/2008 00:54|--ah-----|268] C:\sqmdata00.sqm
    [15/12/2008 00:42|--ah-----|268] C:\sqmdata01.sqm
    [17/12/2008 00:23|--ah-----|268] C:\sqmdata02.sqm
    [20/12/2008 23:15|--ah-----|268] C:\sqmdata03.sqm
    [14/09/2008 22:16|--ah-----|268] C:\sqmdata04.sqm
    [15/09/2008 09:35|--ah-----|268] C:\sqmdata05.sqm
    [17/09/2008 23:39|--ah-----|268] C:\sqmdata06.sqm
    [03/10/2008 09:18|--ah-----|268] C:\sqmdata07.sqm
    [04/10/2008 18:46|--ah-----|268] C:\sqmdata08.sqm
    [16/11/2008 01:06|--ah-----|268] C:\sqmdata09.sqm
    [17/11/2008 13:14|--ah-----|268] C:\sqmdata10.sqm
    [17/11/2008 16:22|--ah-----|268] C:\sqmdata11.sqm
    [17/11/2008 20:21|--ah-----|268] C:\sqmdata12.sqm
    [18/11/2008 18:08|--ah-----|268] C:\sqmdata13.sqm
    [18/11/2008 20:29|--ah-----|268] C:\sqmdata14.sqm
    [20/11/2008 11:04|--ah-----|268] C:\sqmdata15.sqm
    [21/11/2008 17:53|--ah-----|268] C:\sqmdata16.sqm
    [24/11/2008 18:25|--ah-----|268] C:\sqmdata17.sqm
    [24/11/2008 23:07|--ah-----|268] C:\sqmdata18.sqm
    [28/11/2008 19:04|--ah-----|268] C:\sqmdata19.sqm
    [14/12/2008 00:54|--ah-----|244] C:\sqmnoopt00.sqm
    [15/12/2008 00:42|--ah-----|244] C:\sqmnoopt01.sqm
    [17/12/2008 00:23|--ah-----|244] C:\sqmnoopt02.sqm
    [20/12/2008 23:15|--ah-----|244] C:\sqmnoopt03.sqm
    [14/09/2008 22:16|--ah-----|244] C:\sqmnoopt04.sqm
    [15/09/2008 09:35|--ah-----|244] C:\sqmnoopt05.sqm
    [17/09/2008 23:39|--ah-----|244] C:\sqmnoopt06.sqm
    [03/10/2008 09:18|--ah-----|244] C:\sqmnoopt07.sqm
    [04/10/2008 18:46|--ah-----|244] C:\sqmnoopt08.sqm
    [16/11/2008 01:06|--ah-----|244] C:\sqmnoopt09.sqm
    [17/11/2008 13:14|--ah-----|244] C:\sqmnoopt10.sqm
    [17/11/2008 16:22|--ah-----|244] C:\sqmnoopt11.sqm
    [17/11/2008 20:21|--ah-----|244] C:\sqmnoopt12.sqm
    [18/11/2008 18:08|--ah-----|244] C:\sqmnoopt13.sqm
    [18/11/2008 20:29|--ah-----|244] C:\sqmnoopt14.sqm
    [20/11/2008 11:04|--ah-----|244] C:\sqmnoopt15.sqm
    [21/11/2008 17:53|--ah-----|244] C:\sqmnoopt16.sqm
    [24/11/2008 18:25|--ah-----|244] C:\sqmnoopt17.sqm
    [24/11/2008 23:07|--ah-----|244] C:\sqmnoopt18.sqm
    [28/11/2008 19:04|--ah-----|244] C:\sqmnoopt19.sqm
    [18/09/2009 17:13|--a------|3101] C:\TB.txt
    [01/02/2009 12:40|--a------|0] C:\Tech_Vista.log
    [04/09/2009 16:21|--a------|825] C:\updatedatfix.log
    [18/09/2009 18:09|--a------|5731] C:\UsbFix.txt
    [28/07/2001 07:07|---hs----|0] D:\AUTOEXEC.BAT
    [23/11/2004 17:48|---hs----|6] D:\BLOCK.RIN
    [09/01/2002 20:52|---hs----|244] D:\BOOT.INI
    [17/08/2001 10:26|---hs----|237728] D:\CMLDR
    [28/07/2001 07:07|---hs----|0] D:\CONFIG.SYS
    [10/09/2002 17:21|---hs----|7850] D:\Folder.htt
    [30/04/2001 21:16|---hs----|14] D:\Graph
    [25/01/2002 19:21|---hs----|0] D:\GRAPH16
    [30/11/2004 12:01|---hs----|73728] D:\Info.exe
    [28/07/2001 07:07|---hs----|0] D:\IO.SYS
    [02/01/2005 19:24|---hs----|942] D:\MASTER.LOG
    [28/07/2001 07:07|---hs----|0] D:\MSDOS.SYS
    [25/07/2001 23:00|---hs----|45124] D:\NTDETECT.COM
    [17/08/2001 16:32|---hs----|0] D:\NTFS
    [25/07/2001 23:00|---hs----|222880] D:\NTLDR
    [03/03/2003 13:46|---hs----|111377] D:\protect.ed
    [23/11/2004 17:39|---hs----|36] D:\SaveFile.Dir
    [30/04/2001 21:16|---hs----|14] D:\SVGA
    [02/01/2005 19:24|--ahs----|942] D:\USER
    [03/03/2003 13:41|---hs----|88038] D:\Warning.bmp
    [18/08/2001 16:00|---hs----|10] D:\WIN51
    [22/01/2001 16:00|---hs----|11] D:\WIN51.B2
    [25/07/2001 16:00|---hs----|11] D:\WIN51.RC1
    [25/07/2001 21:47|---hs----|11] D:\WIN51.RC2
    [18/08/2001 16:00|---hs----|10] D:\WIN51IC
    [20/03/2001 16:00|---hs----|11] D:\WIN51IC.B2
    [25/07/2001 16:00|---hs----|11] D:\WIN51IC.RC1
    [25/07/2001 16:00|---hs----|11] D:\WIN51IC.RC2
    [17/08/2001 16:00|---hs----|10] D:\WIN51IP
    [22/01/2001 16:00|---hs----|11] D:\WIN51IP.B2
    [25/07/2001 21:47|---hs----|11] D:\WIN51IP.RC2
    [17/08/2001 14:17|---hs----|184] D:\WINBOM.INI
    [24/02/2004 17:38|--a------|498] D:\BATCH.OLD
    [01/02/2005 01:01|--ahs----|1552] D:\BATCH.LOG
    [02/01/2005 20:01|---hs----|218] D:\cPCinfo.log

    ################## | Vaccination |

    # C:\autorun.inf -> Folder created by UsbFix.
    # D:\autorun.inf -> Folder created by UsbFix.

    ################## | Upload |

    Veuillez envoyer le fichier : C:\DOCUME~1\COMPAQ~1\Bureau\UsbFix_Upload_Me_BEN.zip : https://www.androidworld.fr/
    Merci pour votre contribution .

    ################## | ! Fin du rapport # UsbFix V6.034 ! |
    0
  11. baoben
     
    je viens de t'envoyer le rapport usb-fix et celui ci est bien passé mais celui de ad-remover ne semble pas vouloir passer pourtant lorsque je valide il m'indique "vous avez déjà envoyé ce message"
    Etrange... Est il possible qu'il soit trop gros pour passer sur le forum??
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Est il possible qu'il soit trop gros pour passer sur le forum?

      Oui, cela arrive. (ou bien un mot "blacklisté")


      Pour gagner un peu de temps et s'assurer qu'AdRemover a bien fait le ménage, uploade ce fichier:
      C:\Ad-report-clean.log à cette adresse: http://www.cijoint.fr/

      Il faut cliquer en un premier temps sur "choisir le fichier" pour sélectionner le rapport, puis sur "cliquez ici pour déposer le fichier".
      A la suite du téléchargement, un lien sera créé --> Copie/colle le moi dans ton prochain message.

      Je jetterai un coup d'oeil sur ton rapport Rsit plus tard et te donnerai les instructions.

      @+
      0
  12. baoben
     
    rapport navilog

    Fix Navipromo version 4.0.2 commencé le 18/09/2009 18:21:42,34

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 27.08.2009 à 11h00 par IL-MAFIOSO

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.06GHz )
    BIOS : Default System BIOS
    USER : Compaq_Propriétaire ( Administrator )
    BOOT : Normal boot

    Antivirus : avast! antivirus 4.8.1351 [VPS 090917-0] 4.8.1351 (Activated)

    C:\ (Local Disk) - NTFS - Total:180 Go (Free:107 Go)
    D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    Recherche executée en mode normal

    Nettoyage exécuté au redémarrage de l'ordinateur

    C:\Program Files\Instant Access supprimé !
    C:\WINDOWS\tmlpcert2007 supprimé !

    Nettoyage contenu C:\WINDOWS\Temp effectué !
    Nettoyage contenu C:\Documents and Settings\Compaq_Propri‚taire\locals~1\Temp effectué !

    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok

    Certificat Egroup supprimé !

    *** Scan terminé 18/09/2009 18:30:29,79 ***
    0
  13. baoben
     
    Rapport mbam

    Malwarebytes' Anti-Malware 1.41
    Version de la base de données: 2820
    Windows 5.1.2600 Service Pack 3

    18/09/2009 18:48:18
    mbam-log-2009-09-18 (18-48-18).txt

    Type de recherche: Examen rapide
    Eléments examinés: 95274
    Temps écoulé: 5 minute(s), 21 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 1
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 2
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\DriveCleaner Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\DriveCleaner Free\Logs (Rogue.DriveCleaner) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\DriveCleaner Free\Logs\update.log (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    0
  14. baoben
     
    et voici le dernier rapport pour que tu saches où on en est... j'ai par contre bien peur que tu n'es pas reçu le rapport de ad-remover... Tient moi au courant je suis a ta disposition et merci encore

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Compaq_Propriétaire at 2009-09-18 18:57:55
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 110 GB (59%) free of 185 GB
    Total RAM: 959 MB (34% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:58:06, on 18/09/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\VM_STI.EXE
    C:\Program Files\QuickTime\QTTask.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\PROGRA~1\MICROS~4\rapimgr.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Logitech\Logitech Vid\vid.exe
    C:\Program Files\NETGEAR\WG311v3\wlancfg5.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
    C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
    C:\Program Files\trend micro\Compaq_Propriétaire.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - Default URLSearchHook is missing
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: Microsoft MSJava 32 - {43F7497C-7687-4DEA-A057-F21BD81BC896} - C:\WINDOWS\system32\msjava32.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
    O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
    O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: NETGEAR WG311v3 Smart Wizard.lnk = ?
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
    O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} - http://acces.blonde.com/package/PackageHtmlCab.CAB
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Service Google Update (gupdate1ca37ebf4e8c73e) (gupdate1ca37ebf4e8c73e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    0
  15. baoben
     
    les fichiers .log ne peuvent pas etre deposés avec le site cijoint.fr
    autre demarcge possible?
    peut etre envoyer le rapport en 2fois ici?
    0
  16. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    1/
    Tu peux essayer via ce site pour le rapport d'AdRemover.

    "Parcourir" puis "envoyer" (pas besoin de mail ou de mot de passe): Le lien sera créé.

    2/
    Fais un scan avec Kaspersky et poste le rapport stp.
    0
  17. baoben
     
    Le rapport ad-remover clean.log fait 64ko
    Je te l'envoi en deux partie. Voici la premiere partie:

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_V | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 15/09/2009 à 10:00 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 17:16:08, 18/09/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: BEN | Utilisateur actuel: Compaq_Propri‚taire
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    HKCU\Software\FunWebProducts
    HKCU\Software\Grand Virtual
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKCU\Software\Titan Poker
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}
    HKLM\Software\Titan Poker
    HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{08165EA0-E946-11CF-9C87-00AA005127ED}
    .
    C:\Documents and Settings\All Users\Bureau\Titan Poker.lnk
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
    C:\Poker\Titan Poker
    C:\Poker\Titan Poker\cactivex.dll
    C:\Poker\Titan Poker\casino.cli
    C:\Poker\Titan Poker\casino.exe
    C:\Poker\Titan Poker\casino.hlp
    C:\Poker\Titan Poker\casino.ico
    C:\Poker\Titan Poker\data
    C:\Poker\Titan Poker\data\blackjack
    C:\Poker\Titan Poker\data\blackjack.dll
    C:\Poker\Titan Poker\data\blackjack.gam
    C:\Poker\Titan Poker\data\blackjack\back.jpg
    C:\Poker\Titan Poker\data\blackjack\blackjack_winsign.jpg
    C:\Poker\Titan Poker\data\cashier.dll
    C:\Poker\Titan Poker\data\cashier.gam
    C:\Poker\Titan Poker\data\common
    C:\Poker\Titan Poker\data\common.dll
    C:\Poker\Titan Poker\data\common.gam
    C:\Poker\Titan Poker\data\common\fonts
    C:\Poker\Titan Poker\data\common\fonts\futurabdcnbt_24.fon
    C:\Poker\Titan Poker\data\common\fonts\kabelbd.fon
    C:\Poker\Titan Poker\data\common\fonts\kabelultbt.fon
    C:\Poker\Titan Poker\data\common\fonts\lcd2_17.fon
    C:\Poker\Titan Poker\data\common\fonts\square721bdexbt.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721cnbt16.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721cnbt49.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721mdbt25.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma_ap.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma10b.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8_.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8b.fon
    C:\Poker\Titan Poker\data\common\fonts\times32.fon
    C:\Poker\Titan Poker\data\common\interface
    C:\Poker\Titan Poker\data\common\interface\aplay_advanced.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_arrow-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_arrow.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_buttons.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_check.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_delay.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_mode.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_ribbon.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_simple.jpg
    C:\Poker\Titan Poker\data\common\interface\black100x100.png
    C:\Poker\Titan Poker\data\common\interface\bottom_ribbon-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\bottom_ribbon.jpg
    C:\Poker\Titan Poker\data\common\interface\chat-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\chat
    C:\Poker\Titan Poker\data\common\interface\chat.jpg
    C:\Poker\Titan Poker\data\common\interface\chat\chat_window.png
    C:\Poker\Titan Poker\data\common\interface\chat\close-over.jpg
    C:\Poker\Titan Poker\data\common\interface\chat\font.png
    C:\Poker\Titan Poker\data\common\interface\chat\send.png
    C:\Poker\Titan Poker\data\common\interface\empty-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\empty.jpg
    C:\Poker\Titan Poker\data\common\interface\ipoker-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\ipoker.jpg
    C:\Poker\Titan Poker\data\common\interface\logo-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\logo.jpg
    C:\Poker\Titan Poker\data\common\interface\menu.jpg
    C:\Poker\Titan Poker\data\common\interface\padlock.png
    C:\Poker\Titan Poker\data\common\interface\playtech-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\playtech.jpg
    C:\Poker\Titan Poker\data\common\interface\select_buttons.jpg
    C:\Poker\Titan Poker\data\common\interface\timeout-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\timeout.jpg
    C:\Poker\Titan Poker\data\common\interface\waiting_for_other_players.jpg
    C:\Poker\Titan Poker\data\common\loading.png
    C:\Poker\Titan Poker\data\common\loading_anim.png
    C:\Poker\Titan Poker\data\common\options
    C:\Poker\Titan Poker\data\common\options\arrows.png
    C:\Poker\Titan Poker\data\common\options\avatars-alpha.jpg
    C:\Poker\Titan Poker\data\common\options\avatars.jpg
    C:\Poker\Titan Poker\data\common\options\check.png
    C:\Poker\Titan Poker\data\common\options\options-back.jpg
    C:\Poker\Titan Poker\data\common\options\options_adjust.jpg
    C:\Poker\Titan Poker\data\common\options\slider.jpg
    C:\Poker\Titan Poker\data\common\ui
    C:\Poker\Titan Poker\data\common\ui\sysmenu.jpg
    C:\Poker\Titan Poker\data\common\ui\ui-alpha.jpg
    C:\Poker\Titan Poker\data\common\ui\ui.jpg
    C:\Poker\Titan Poker\data\craps
    C:\Poker\Titan Poker\data\craps.dll
    C:\Poker\Titan Poker\data\craps.gam
    C:\Poker\Titan Poker\data\craps\3d
    C:\Poker\Titan Poker\data\craps\3d\back.z
    C:\Poker\Titan Poker\data\craps\3d\dice.lwo
    C:\Poker\Titan Poker\data\craps\3d\dice.lws
    C:\Poker\Titan Poker\data\craps\3d\dice.png
    C:\Poker\Titan Poker\data\craps\back.jpg
    C:\Poker\Titan Poker\data\craps\coins.png
    C:\Poker\Titan Poker\data\loader.dll
    C:\Poker\Titan Poker\data\loader.gam
    C:\Poker\Titan Poker\data\lobby
    C:\Poker\Titan Poker\data\lobby\back.jpg
    C:\Poker\Titan Poker\data\lobby\buttons
    C:\Poker\Titan Poker\data\lobby\buttons\cashier_buttons-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\cashier_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\goto_tournament.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\jointable.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\players.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\players_waiting.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\refer_button.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\search-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\search.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\waitinglist_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs
    C:\Poker\Titan Poker\data\lobby\dialogs\close.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back2.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back3.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_big_headers.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_headers.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\gotothenexttournament-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\gotothenexttournament.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\header.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\nickname.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\tour_details_row.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\tournament_registration.jpg
    C:\Poker\Titan Poker\data\lobby\filter_text.png
    C:\Poker\Titan Poker\data\lobby\filtering_tab-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\filtering_tab.jpg
    C:\Poker\Titan Poker\data\lobby\info_headers.png
    C:\Poker\Titan Poker\data\lobby\loading_info.jpg
    C:\Poker\Titan Poker\data\lobby\login
    C:\Poker\Titan Poker\data\lobby\login\back.jpg
    C:\Poker\Titan Poker\data\lobby\login\cancel-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\cancel.jpg
    C:\Poker\Titan Poker\data\lobby\login\checkboxes-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\checkboxes.jpg
    C:\Poker\Titan Poker\data\lobby\login\createaccount-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\createaccount.jpg
    C:\Poker\Titan Poker\data\lobby\login\dont_have_an_account-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\dont_have_an_account.jpg
    C:\Poker\Titan Poker\data\lobby\login\login-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\login.jpg
    C:\Poker\Titan Poker\data\lobby\login\logininfo-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\logininfo.jpg
    C:\Poker\Titan Poker\data\lobby\mc_text.jpg
    C:\Poker\Titan Poker\data\lobby\players_waiting_loop.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_back.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_buttons-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_close.jpg
    C:\Poker\Titan Poker\data\lobby\sidegames
    C:\Poker\Titan Poker\data\lobby\sidegames\sidegames-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\sidegames\sidegames.jpg
    C:\Poker\Titan Poker\data\lobby\tables
    C:\Poker\Titan Poker\data\lobby\tables\hide_finished.jpg
    C:\Poker\Titan Poker\data\lobby\tables\hide_finished_cover.jpg
    C:\Poker\Titan Poker\data\lobby\tables\lobby_table_rows.jpg
    C:\Poker\Titan Poker\data\lobby\tables\players_back.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scroll_indicator.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scroll_indicator_h.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scrollbuttons.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scrollbuttons_h.jpg
    C:\Poker\Titan Poker\data\lobby\tables\searchtop.jpg
    C:\Poker\Titan Poker\data\lobby\tables\tables_back-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\tables\tables_back.jpg
    C:\Poker\Titan Poker\data\lobby\tables\top.jpg
    C:\Poker\Titan Poker\data\lobby\treeview_down.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_minus.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_plus.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_right.bmp
    C:\Poker\Titan Poker\data\lobby\waitinglist
    C:\Poker\Titan Poker\data\lobby\waitinglist\num_chooser.jpg
    C:\Poker\Titan Poker\data\poker
    C:\Poker\Titan Poker\data\poker\3d
    C:\Poker\Titan Poker\data\poker\3d\smallview.lws
    C:\Poker\Titan Poker\data\poker\3d\topview.lws
    C:\Poker\Titan Poker\data\poker\chat
    C:\Poker\Titan Poker\data\poker\chat\cards
    C:\Poker\Titan Poker\data\poker\chat\cards\c_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_10_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_2_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_3_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_4_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_5_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_6_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_7_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_8_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_9_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_a_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_j_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_k_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_q_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_10_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_2_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_3_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_4_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_5_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_6_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_7_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_8_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_9_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_a_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_j_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_k_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_q_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_q.png
    C:\Poker\Titan Poker\data\poker_3card
    C:\Poker\Titan Poker\data\poker_3card.gam
    C:\Poker\Titan Poker\data\poker_3card\back.jpg
    C:\Poker\Titan Poker\data\poker_caribbean
    C:\Poker\Titan Poker\data\poker_caribbean.gam
    C:\Poker\Titan Poker\data\poker_caribbean\back.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole1.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole2.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole3.jpg
    C:\Poker\Titan Poker\data\poker_common.dll
    C:\Poker\Titan Poker\data\poker_common.gam
    C:\Poker\Titan Poker\data\poker_holdem
    C:\Poker\Titan Poker\data\poker_holdem.gam
    C:\Poker\Titan Poker\data\poker_holdem\arrows.png
    C:\Poker\Titan Poker\data\poker_holdem\back.jpg
    C:\Poker\Titan Poker\data\poker_lobby.dll
    C:\Poker\Titan Poker\data\poker_lobby.gam
    C:\Poker\Titan Poker\data\poker_table.dll
    C:\Poker\Titan Poker\data\pokergames.dll
    C:\Poker\Titan Poker\data\roulette
    C:\Poker\Titan Poker\data\roulette.dll
    C:\Poker\Titan Poker\data\roulette\3d
    C:\Poker\Titan Poker\data\roulette\3d\back.z
    C:\Poker\Titan Poker\data\roulette\3d\ball.bmp
    C:\Poker\Titan Poker\data\roulette\3d\ball.lwo
    C:\Poker\Titan Poker\data\roulette\3d\disc.lwo
    C:\Poker\Titan Poker\data\roulette\3d\disk.jpg
    C:\Poker\Titan Poker\data\roulette\3d\roulette.lws
    C:\Poker\Titan Poker\data\roulette\3d\turret.cfs
    C:\Poker\Titan Poker\data\roulette\back.jpg
    C:\Poker\Titan Poker\data\roulette\ball.png
    C:\Poker\Titan Poker\data\roulette\buttons
    C:\Poker\Titan Poker\data\roulette\buttons\allcoins1_selected.png
    C:\Poker\Titan Poker\data\roulette\buttons\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\buttons.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\close-over.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\close.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers-over.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\window-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\window.jpg
    C:\Poker\Titan Poker\data\roulette\marker-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\marker.jpg
    C:\Poker\Titan Poker\data\roulette\sounds
    C:\Poker\Titan Poker\data\roulette\sounds\roulettespin.mp3
    C:\Poker\Titan Poker\data\roulette\sounds\roulettestop.mp3
    C:\Poker\Titan Poker\data\roulette\zoom
    C:\Poker\Titan Poker\data\roulette\zoom\zoomanim.jpg
    C:\Poker\Titan Poker\data\roulette\zoom\zoomstill.jpg
    C:\Poker\Titan Poker\data\roulette_french.gam
    C:\Poker\Titan Poker\data\shared
    C:\Poker\Titan Poker\data\shared\3d
    C:\Poker\Titan Poker\data\shared\3d\chrome.png
    C:\Poker\Titan Poker\data\shared\9line
    C:\Poker\Titan Poker\data\shared\9line\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\9line\buttons.jpg
    C:\Poker\Titan Poker\data\shared\arrow_3d_down.png
    C:\Poker\Titan Poker\data\shared\blackjack
    C:\Poker\Titan Poker\data\shared\blackjack\blackjack.lws
    C:\Poker\Titan Poker\data\shared\bubble_lobby-alpha.jpg
    C:\Poker\Titan Poker\data\shared\bubble_lobby.jpg
    C:\Poker\Titan Poker\data\shared\buttons
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons-over.jpg
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons.jpg
    C:\Poker\Titan Poker\data\shared\buttons\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\buttons\buttons.jpg
    C:\Poker\Titan Poker\data\shared\cards
    C:\Poker\Titan Poker\data\shared\cards\back.z
    C:\Poker\Titan Poker\data\shared\cards\cardhq.lwo
    C:\Poker\Titan Poker\data\shared\cards\cardlq.lwo
    C:\Poker\Titan Poker\data\shared\cards\cards.lws
    C:\Poker\Titan Poker\data\shared\cards\poker
    C:\Poker\Titan Poker\data\shared\cards\poker\allcards-alpha.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\allcards.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\allwild.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\back.bmp
    C:\Poker\Titan Poker\data\shared\cards\textures
    C:\Poker\Titan Poker\data\shared\cards\textures\allcards.jpg
    C:\Poker\Titan Poker\data\shared\cards\textures\allcards_xl.jpg
    C:\Poker\Titan Poker\data\shared\cards\textures\back.bmp
    C:\Poker\Titan Poker\data\shared\cards\textures\joker.png
    C:\Poker\Titan Poker\data\shared\coins
    C:\Poker\Titan Poker\data\shared\coins\tablecoins
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins1_coins-alpha.jpg
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins1_coins.jpg
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins1_selected.png
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins2_coins-alpha.jpg
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins2_coins.jpg
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins2_selected.png
    C:\Poker\Titan Poker\data\shared\coins\tablecoins\allcoins4_coins.jpg
    C:\Poker\Titan Poker\data\shared\doublescreen
    C:\Poker\Titan Poker\data\shared\doublescreen\back.png
    C:\Poker\Titan Poker\data\shared\doublescreen\buttons_screen-alpha.jpg
    C:\Poker\Titan Poker\data\shared\doublescreen\buttons_screen.jpg
    C:\Poker\Titan Poker\data\shared\history
    C:\Poker\Titan Poker\data\shared\history\cards
    C:\Poker\Titan Poker\data\shared\history\cards\allcards.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\allcards7stud-alpha.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\allcards7stud.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\card-alpha.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\card7stud-alpha.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\joker.jpg
    C:\Poker\Titan Poker\data\shared\history\cards\joker7stud.jpg
    C:\Poker\Titan Poker\data\shared\html
    C:\Poker\Titan Poker\data\shared\html\bg.jpg
    C:\Poker\Titan Poker\data\shared\html\button_left.gif
    C:\Poker\Titan Poker\data\shared\html\button_middle.gif
    C:\Poker\Titan Poker\data\shared\html\button_right.gif
    C:\Poker\Titan Poker\data\shared\html\cashier_offline.css
    C:\Poker\Titan Poker\data\shared\html\cashier_offline.js
    C:\Poker\Titan Poker\data\shared\html\cashier_offline_functions.js
    C:\Poker\Titan Poker\data\shared\html\cashier_offline_poker.html
    C:\Poker\Titan Poker\data\shared\html\chat
    C:\Poker\Titan Poker\data\shared\html\chat\chat.html
    C:\Poker\Titan Poker\data\shared\html\chat\colors.html
    C:\Poker\Titan Poker\data\shared\html\chat\edit.html
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons.html
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\01.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\02.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\03.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\04.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\05.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\06.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\07.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\08.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\09.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\10.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\11.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\12.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\13.gif
    C:\Poker\Titan Poker\data\shared\html\chat\emoticons\14.gif
    C:\Poker\Titan Poker\data\shared\html\details_desc_back.jpg
    C:\Poker\Titan Poker\data\shared\html\details_desc_back2.jpg
    C:\Poker\Titan Poker\data\shared\html\icon_comps.gif
    C:\Poker\Titan Poker\data\shared\html\icon_transactionhistory.gif
    C:\Poker\Titan Poker\data\shared\html\icon_withdraw.gif
    C:\Poker\Titan Poker\data\shared\html\logo_offline_cashier.gif
    C:\Poker\Titan Poker\data\shared\html\spacer.gif
    C:\Poker\Titan Poker\data\shared\jackpot-alpha.jpg
    C:\Poker\Titan Poker\data\shared\jackpot.jpg
    C:\Poker\Titan Poker\data\shared\nametag.jpg
    C:\Poker\Titan Poker\data\shared\nametag_long.jpg
    C:\Poker\Titan Poker\data\shared\progcover.png
    C:\Poker\Titan Poker\data\shared\sides.jpg
    C:\Poker\Titan Poker\data\shared\sounds
    C:\Poker\Titan Poker\data\shared\sounds\02.mp3
    C:\Poker\Titan Poker\data\shared\sounds\02s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\03.mp3
    C:\Poker\Titan Poker\data\shared\sounds\03s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\04.mp3
    C:\Poker\Titan Poker\data\shared\sounds\04s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\05.mp3
    C:\Poker\Titan Poker\data\shared\sounds\05s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\06.mp3
    C:\Poker\Titan Poker\data\shared\sounds\06s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\07.mp3
    C:\Poker\Titan Poker\data\shared\sounds\07s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\08.mp3
    C:\Poker\Titan Poker\data\shared\sounds\08s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\09.mp3
    C:\Poker\Titan Poker\data\shared\sounds\09s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\10.mp3
    C:\Poker\Titan Poker\data\shared\sounds\10s.mp3
    C:\Poker\Titan Poker\data\shared\sounds\ace.mp3
    C:\Poker\Titan Poker\data\shared\sounds\aces.mp3
    C:\Poker\Titan Poker\data\shared\sounds\and.mp3
    C:\Poker\Titan Poker\data\shared\sounds\bigwin.mp3
    C:\Poker\Titan Poker\data\shared\sounds\buzzer.mp3
    C:\Poker\Titan Poker\data\shared\sounds\card.mp3
    C:\Poker\Titan Poker\data\shared\sounds\card.wav
    C:\Poker\Titan Poker\data\shared\sounds\cardturn.mp3
    C:\Poker\Titan Poker\data\shared\sounds\chip.mp3
    C:\Poker\Titan Poker\data\shared\sounds\click.mp3
    C:\Poker\Titan Poker\data\shared\sounds\clubs.mp3
    C:\Poker\Titan Poker\data\shared\sounds\coin.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\anteplease_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\betsplease_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\black_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\blackjack_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\bust_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\comingout_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\dealerdnq_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\dealerwins_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\insurance_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\0_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\1_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\10_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\11_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\12_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\13_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\14_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\15_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\16_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\17_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\18_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\19_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\2_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\20_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\21_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\22_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\23_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\24_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\25_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\26_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\27_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\28_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\29_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\3_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\30_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\31_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\32_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\33_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\34_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\35_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\36_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\4_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\5_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\6_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\7_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\8_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\numbers\9_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\playerwins_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\push_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealervoices\red_male1.mp3
    C:\Poker\Titan Poker\data\shared\sounds\dealflop.mp3
    0
  18. baoben
     
    Le rapport ad-remover.clean.log fait 64ko c enorme. Il faut que je le partage en 10
    Voici la premiere partie

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_V | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 15/09/2009 à 10:00 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 17:16:08, 18/09/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: BEN | Utilisateur actuel: Compaq_Propri‚taire
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    HKCU\Software\FunWebProducts
    HKCU\Software\Grand Virtual
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKCU\Software\Titan Poker
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}
    HKLM\Software\Titan Poker
    HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{08165EA0-E946-11CF-9C87-00AA005127ED}
    .
    C:\Documents and Settings\All Users\Bureau\Titan Poker.lnk
    C:\Documents and Settings\Compaq_Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
    C:\Poker\Titan Poker
    C:\Poker\Titan Poker\cactivex.dll
    C:\Poker\Titan Poker\casino.cli
    C:\Poker\Titan Poker\casino.exe
    C:\Poker\Titan Poker\casino.hlp
    C:\Poker\Titan Poker\casino.ico
    C:\Poker\Titan Poker\data
    C:\Poker\Titan Poker\data\blackjack
    C:\Poker\Titan Poker\data\blackjack.dll
    C:\Poker\Titan Poker\data\blackjack.gam
    C:\Poker\Titan Poker\data\blackjack\back.jpg
    C:\Poker\Titan Poker\data\blackjack\blackjack_winsign.jpg
    C:\Poker\Titan Poker\data\cashier.dll
    C:\Poker\Titan Poker\data\cashier.gam
    C:\Poker\Titan Poker\data\common
    C:\Poker\Titan Poker\data\common.dll
    C:\Poker\Titan Poker\data\common.gam
    C:\Poker\Titan Poker\data\common\fonts
    C:\Poker\Titan Poker\data\common\fonts\futurabdcnbt_24.fon
    C:\Poker\Titan Poker\data\common\fonts\kabelbd.fon
    C:\Poker\Titan Poker\data\common\fonts\kabelultbt.fon
    C:\Poker\Titan Poker\data\common\fonts\lcd2_17.fon
    C:\Poker\Titan Poker\data\common\fonts\square721bdexbt.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721cnbt16.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721cnbt49.fon
    C:\Poker\Titan Poker\data\common\fonts\swis721mdbt25.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma_ap.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma10b.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8_.fon
    C:\Poker\Titan Poker\data\common\fonts\tahoma8b.fon
    C:\Poker\Titan Poker\data\common\fonts\times32.fon
    C:\Poker\Titan Poker\data\common\interface
    C:\Poker\Titan Poker\data\common\interface\aplay_advanced.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_arrow-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_arrow.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_buttons.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_check.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_delay.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_mode.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_ribbon.jpg
    C:\Poker\Titan Poker\data\common\interface\aplay_simple.jpg
    C:\Poker\Titan Poker\data\common\interface\black100x100.png
    C:\Poker\Titan Poker\data\common\interface\bottom_ribbon-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\bottom_ribbon.jpg
    C:\Poker\Titan Poker\data\common\interface\chat-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\chat
    C:\Poker\Titan Poker\data\common\interface\chat.jpg
    C:\Poker\Titan Poker\data\common\interface\chat\chat_window.png
    C:\Poker\Titan Poker\data\common\interface\chat\close-over.jpg
    C:\Poker\Titan Poker\data\common\interface\chat\font.png
    C:\Poker\Titan Poker\data\common\interface\chat\send.png
    C:\Poker\Titan Poker\data\common\interface\empty-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\empty.jpg
    C:\Poker\Titan Poker\data\common\interface\ipoker-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\ipoker.jpg
    C:\Poker\Titan Poker\data\common\interface\logo-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\logo.jpg
    C:\Poker\Titan Poker\data\common\interface\menu.jpg
    C:\Poker\Titan Poker\data\common\interface\padlock.png
    C:\Poker\Titan Poker\data\common\interface\playtech-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\playtech.jpg
    C:\Poker\Titan Poker\data\common\interface\select_buttons.jpg
    C:\Poker\Titan Poker\data\common\interface\timeout-alpha.jpg
    C:\Poker\Titan Poker\data\common\interface\timeout.jpg
    C:\Poker\Titan Poker\data\common\interface\waiting_for_other_players.jpg
    C:\Poker\Titan Poker\data\common\loading.png
    C:\Poker\Titan Poker\data\common\loading_anim.png
    C:\Poker\Titan Poker\data\common\options
    C:\Poker\Titan Poker\data\common\options\arrows.png
    C:\Poker\Titan Poker\data\common\options\avatars-alpha.jpg
    C:\Poker\Titan Poker\data\common\options\avatars.jpg
    C:\Poker\Titan Poker\data\common\options\check.png
    C:\Poker\Titan Poker\data\common\options\options-back.jpg
    C:\Poker\Titan Poker\data\common\options\options_adjust.jpg
    C:\Poker\Titan Poker\data\common\options\slider.jpg
    C:\Poker\Titan Poker\data\common\ui
    C:\Poker\Titan Poker\data\common\ui\sysmenu.jpg
    C:\Poker\Titan Poker\data\common\ui\ui-alpha.jpg
    C:\Poker\Titan Poker\data\common\ui\ui.jpg
    C:\Poker\Titan Poker\data\craps
    C:\Poker\Titan Poker\data\craps.dll
    C:\Poker\Titan Poker\data\craps.gam
    C:\Poker\Titan Poker\data\craps\3d
    C:\Poker\Titan Poker\data\craps\3d\back.z
    C:\Poker\Titan Poker\data\craps\3d\dice.lwo
    C:\Poker\Titan Poker\data\craps\3d\dice.lws
    C:\Poker\Titan Poker\data\craps\3d\dice.png
    C:\Poker\Titan Poker\data\craps\back.jpg
    C:\Poker\Titan Poker\data\craps\coins.png
    C:\Poker\Titan Poker\data\loader.dll
    C:\Poker\Titan Poker\data\loader.gam
    C:\Poker\Titan Poker\data\lobby
    C:\Poker\Titan Poker\data\lobby\back.jpg
    C:\Poker\Titan Poker\data\lobby\buttons
    C:\Poker\Titan Poker\data\lobby\buttons\cashier_buttons-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\cashier_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\goto_tournament.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\jointable.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\players.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\players_waiting.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\refer_button.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\search-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\search.jpg
    C:\Poker\Titan Poker\data\lobby\buttons\waitinglist_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs
    C:\Poker\Titan Poker\data\lobby\dialogs\close.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back2.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_back3.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_big_headers.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\dialog_headers.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\gotothenexttournament-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\gotothenexttournament.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\header.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\nickname.jpg
    C:\Poker\Titan Poker\data\lobby\dialogs\tour_details_row.jpg
    0
  19. baoben
     
    AD-REMOVER clean.log 2eme partie

    C:\Poker\Titan Poker\data\lobby\dialogs\tournament_registration.jpg
    C:\Poker\Titan Poker\data\lobby\filter_text.png
    C:\Poker\Titan Poker\data\lobby\filtering_tab-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\filtering_tab.jpg
    C:\Poker\Titan Poker\data\lobby\info_headers.png
    C:\Poker\Titan Poker\data\lobby\loading_info.jpg
    C:\Poker\Titan Poker\data\lobby\login
    C:\Poker\Titan Poker\data\lobby\login\back.jpg
    C:\Poker\Titan Poker\data\lobby\login\cancel-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\cancel.jpg
    C:\Poker\Titan Poker\data\lobby\login\checkboxes-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\checkboxes.jpg
    C:\Poker\Titan Poker\data\lobby\login\createaccount-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\createaccount.jpg
    C:\Poker\Titan Poker\data\lobby\login\dont_have_an_account-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\dont_have_an_account.jpg
    C:\Poker\Titan Poker\data\lobby\login\login-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\login.jpg
    C:\Poker\Titan Poker\data\lobby\login\logininfo-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\login\logininfo.jpg
    C:\Poker\Titan Poker\data\lobby\mc_text.jpg
    C:\Poker\Titan Poker\data\lobby\players_waiting_loop.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_back.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_buttons-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_buttons.jpg
    C:\Poker\Titan Poker\data\lobby\quick_search_close.jpg
    C:\Poker\Titan Poker\data\lobby\sidegames
    C:\Poker\Titan Poker\data\lobby\sidegames\sidegames-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\sidegames\sidegames.jpg
    C:\Poker\Titan Poker\data\lobby\tables
    C:\Poker\Titan Poker\data\lobby\tables\hide_finished.jpg
    C:\Poker\Titan Poker\data\lobby\tables\hide_finished_cover.jpg
    C:\Poker\Titan Poker\data\lobby\tables\lobby_table_rows.jpg
    C:\Poker\Titan Poker\data\lobby\tables\players_back.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scroll_indicator.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scroll_indicator_h.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scrollbuttons.jpg
    C:\Poker\Titan Poker\data\lobby\tables\scrollbuttons_h.jpg
    C:\Poker\Titan Poker\data\lobby\tables\searchtop.jpg
    C:\Poker\Titan Poker\data\lobby\tables\tables_back-alpha.jpg
    C:\Poker\Titan Poker\data\lobby\tables\tables_back.jpg
    C:\Poker\Titan Poker\data\lobby\tables\top.jpg
    C:\Poker\Titan Poker\data\lobby\treeview_down.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_minus.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_plus.bmp
    C:\Poker\Titan Poker\data\lobby\treeview_right.bmp
    C:\Poker\Titan Poker\data\lobby\waitinglist
    C:\Poker\Titan Poker\data\lobby\waitinglist\num_chooser.jpg
    C:\Poker\Titan Poker\data\poker
    C:\Poker\Titan Poker\data\poker\3d
    C:\Poker\Titan Poker\data\poker\3d\smallview.lws
    C:\Poker\Titan Poker\data\poker\3d\topview.lws
    C:\Poker\Titan Poker\data\poker\chat
    C:\Poker\Titan Poker\data\poker\chat\cards
    C:\Poker\Titan Poker\data\poker\chat\cards\c_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_10_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_2_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_3_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_4_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_5_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_6_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_7_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_8_4c.png
    0
  20. baoben
     
    3eme partie

    C:\Poker\Titan Poker\data\poker\chat\cards\c_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_9_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_a_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_j_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_k_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\c_q_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_10_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_2_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_3_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_4_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_5_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_6_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_7_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_8_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_9_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_a_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_j_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_k_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\d_q_4c.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\h_q.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_10.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_2.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_3.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_4.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_5.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_6.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_7.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_8.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_9.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_a.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_j.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_k.png
    C:\Poker\Titan Poker\data\poker\chat\cards\s_q.png
    C:\Poker\Titan Poker\data\poker_3card
    C:\Poker\Titan Poker\data\poker_3card.gam
    C:\Poker\Titan Poker\data\poker_3card\back.jpg
    C:\Poker\Titan Poker\data\poker_caribbean
    C:\Poker\Titan Poker\data\poker_caribbean.gam
    C:\Poker\Titan Poker\data\poker_caribbean\back.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole1.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole2.jpg
    C:\Poker\Titan Poker\data\poker_caribbean\coinhole3.jpg
    C:\Poker\Titan Poker\data\poker_common.dll
    C:\Poker\Titan Poker\data\poker_common.gam
    C:\Poker\Titan Poker\data\poker_holdem
    C:\Poker\Titan Poker\data\poker_holdem.gam
    C:\Poker\Titan Poker\data\poker_holdem\arrows.png
    C:\Poker\Titan Poker\data\poker_holdem\back.jpg
    C:\Poker\Titan Poker\data\poker_lobby.dll
    0
  21. baoben
     
    4eme partie

    C:\Poker\Titan Poker\data\poker_lobby.gam
    C:\Poker\Titan Poker\data\poker_table.dll
    C:\Poker\Titan Poker\data\pokergames.dll
    C:\Poker\Titan Poker\data\roulette
    C:\Poker\Titan Poker\data\roulette.dll
    C:\Poker\Titan Poker\data\roulette\3d
    C:\Poker\Titan Poker\data\roulette\3d\back.z
    C:\Poker\Titan Poker\data\roulette\3d\ball.bmp
    C:\Poker\Titan Poker\data\roulette\3d\ball.lwo
    C:\Poker\Titan Poker\data\roulette\3d\disc.lwo
    C:\Poker\Titan Poker\data\roulette\3d\disk.jpg
    C:\Poker\Titan Poker\data\roulette\3d\roulette.lws
    C:\Poker\Titan Poker\data\roulette\3d\turret.cfs
    C:\Poker\Titan Poker\data\roulette\back.jpg
    C:\Poker\Titan Poker\data\roulette\ball.png
    C:\Poker\Titan Poker\data\roulette\buttons
    C:\Poker\Titan Poker\data\roulette\buttons\allcoins1_selected.png
    C:\Poker\Titan Poker\data\roulette\buttons\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\buttons.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\close-over.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\close.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers-over.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\numbers.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\window-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\buttons\window.jpg
    C:\Poker\Titan Poker\data\roulette\marker-alpha.jpg
    C:\Poker\Titan Poker\data\roulette\marker.jpg
    C:\Poker\Titan Poker\data\roulette\sounds
    C:\Poker\Titan Poker\data\roulette\sounds\roulettespin.mp3
    C:\Poker\Titan Poker\data\roulette\sounds\roulettestop.mp3
    C:\Poker\Titan Poker\data\roulette\zoom
    C:\Poker\Titan Poker\data\roulette\zoom\zoomanim.jpg
    C:\Poker\Titan Poker\data\roulette\zoom\zoomstill.jpg
    C:\Poker\Titan Poker\data\roulette_french.gam
    C:\Poker\Titan Poker\data\shared
    C:\Poker\Titan Poker\data\shared\3d
    C:\Poker\Titan Poker\data\shared\3d\chrome.png
    C:\Poker\Titan Poker\data\shared\9line
    C:\Poker\Titan Poker\data\shared\9line\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\9line\buttons.jpg
    C:\Poker\Titan Poker\data\shared\arrow_3d_down.png
    C:\Poker\Titan Poker\data\shared\blackjack
    C:\Poker\Titan Poker\data\shared\blackjack\blackjack.lws
    C:\Poker\Titan Poker\data\shared\bubble_lobby-alpha.jpg
    C:\Poker\Titan Poker\data\shared\bubble_lobby.jpg
    C:\Poker\Titan Poker\data\shared\buttons
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons-over.jpg
    C:\Poker\Titan Poker\data\shared\buttons\allbuttons.jpg
    C:\Poker\Titan Poker\data\shared\buttons\buttons-alpha.jpg
    C:\Poker\Titan Poker\data\shared\buttons\buttons.jpg
    C:\Poker\Titan Poker\data\shared\cards
    C:\Poker\Titan Poker\data\shared\cards\back.z
    C:\Poker\Titan Poker\data\shared\cards\cardhq.lwo
    C:\Poker\Titan Poker\data\shared\cards\cardlq.lwo
    C:\Poker\Titan Poker\data\shared\cards\cards.lws
    C:\Poker\Titan Poker\data\shared\cards\poker
    C:\Poker\Titan Poker\data\shared\cards\poker\allcards-alpha.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\allcards.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\allwild.jpg
    C:\Poker\Titan Poker\data\shared\cards\poker\back.bmp
    C:\Poker\Titan Poker\data\shared\cards\textures
    C:\Poker\Titan Poker\data\shared\cards\textures\allcards.jpg
    C:\Poker\Titan Poker\data\shared\cards\textures\allcards_xl.jpg
    C:\Poker\Titan Poker\data\shared\cards\textures\back.bmp
    C:\Poker\Titan Poker\data\shared\cards\textures\joker.png
    0
  • 1
  • 2